Jinwoo-H and Orca
869603a3e8
feat: add disconnected relay cache lock
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 19:29:49 -04:00
Jinwoo-H and Orca
7580600e37
feat(ssh): add verified relay artifact extraction
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 17:51:26 -04:00
Jinwoo-H and Orca
c9f6da55e4
build(ssh): use portable relay archives
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 16:30:48 -04:00
Jinwoo-H and Orca
0d7e0077dd
ci(ssh): run relay downloader tests natively
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 15:44:27 -04:00
Jinwoo-H and Orca
d1dda17c87
ci(ssh): run relay selector tests natively
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 15:06:41 -04:00
Jinwoo-H and Orca
b6bb3dd9a5
build(ssh): compose relay draft release verification
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 14:29:19 -04:00
Jinwoo-H and Orca
b8c42f92ab
build(ssh): execute verified relay runtime archives
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 13:51:33 -04:00
Jinwoo-H and Orca
0fbbac118e
build(ssh): materialize verified relay draft assets
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 13:16:24 -04:00
Jinwoo-H and Orca
5460563ff4
build(ssh): add relay release asset gate
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 12:46:20 -04:00
Jinwoo-H and Orca
8d9013cd10
build(ssh): add bounded relay draft upload
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 12:06:02 -04:00
Jinwoo-H and Orca
bb4b527e4e
ci: probe Linux relay build prerequisites
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 11:35:26 -04:00
Jinwoo-H and Orca
c9ffa26a90
ci: bound Linux relay runtime prerequisites
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 11:26:11 -04:00
Jinwoo-H and Orca
4979bc26c9
ci: add protected relay manifest workflow
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 11:00:10 -04:00
Jinwoo-H and Orca
8cf80a0228
ci: add fail-closed relay manifest aggregation
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 10:33:16 -04:00
Jinwoo-H and Orca
4180e04ac4
ci: add protected relay manifest seed signer
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 10:13:01 -04:00
Jinwoo-H and Orca
91f59d19e5
ci: finalize Linux relay artifacts for aggregation
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 09:34:18 -04:00
Jinwoo-H and Orca
c2db2b62e5
ci: add manual relay runtime signing rehearsal
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 09:00:34 -04:00
Jinwoo-H and Orca
2a7083d278
ci(ssh): add disconnected native signing workflow
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 08:23:17 -04:00
Jinwoo-H and Orca
994daefabc
ci(ssh): expose native runtime prerequisite
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 07:31:33 -04:00
Jinwoo-H and Orca
1989e801af
build(ssh): verify post-sign runtime metadata
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 06:29:58 -04:00
Jinwoo-H and Orca
cfea521c7c
build(ssh): produce verified runtime manifest tuples
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 05:44:14 -04:00
Jinwoo-H and Orca
5e0c776d01
build(ssh): add fail-closed manifest aggregate
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 03:35:31 -04:00
Jinwoo-H and Orca
14355dfe05
build(ssh): add manifest signing handoff contracts
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 02:48:38 -04:00
Jinwoo-H and Orca
707a9da23e
build(ssh): align Windows runtime manifest identity
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 02:00:46 -04:00
Jinwoo-H and Orca
e995186545
build(ssh): verify runtime release bytes
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 01:30:16 -04:00
Jinwoo-H and Orca
6f13e94f8a
build(ssh): gate runtime release stages
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 00:47:46 -04:00
Jinwoo-H and Orca
6ef2943ded
build(ssh): verify preserved Windows signatures
...
Co-authored-by: Orca <help@stably.ai >
2026-07-15 00:18:03 -04:00
Jinwoo-H and Orca
072c0d434e
build(ssh): verify Windows runtime signatures
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 23:53:56 -04:00
Jinwoo-H and Orca
debb13f301
build(ssh): verify macOS runtime signatures
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 23:21:00 -04:00
Jinwoo-H and Orca
3eeea7bdb8
build(ssh): apply native signing returns safely
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 22:53:48 -04:00
Jinwoo-H and Orca
1a79e49214
build(ssh): assess native signing candidates
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 22:22:05 -04:00
Jinwoo-H and Orca
c847c4a11d
build(ssh): validate native signing payloads
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 21:51:45 -04:00
Jinwoo-H and Orca
9c03572358
ci(ssh): run native signing plan contracts
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 21:21:29 -04:00
Jinwoo-H and Orca
05b3a4b18a
build(ssh): preserve Linux runner ownership
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 20:29:40 -04:00
Jinwoo-H and Orca
0cb3f7510b
build(ssh): prove Linux runtime floor
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 20:00:11 -04:00
Jinwoo-H and Orca
26bbd7b67a
build(ssh): complete runtime artifact provenance
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 17:06:44 -04:00
Jinwoo-H and Orca
ec5461affb
build(ssh): enforce exact relay runtime closure
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 16:52:32 -04:00
Jinwoo-H and Orca
0d3a0c9d3f
test(ssh): diagnose generated arm64 build inputs
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 14:16:12 -04:00
Jinwoo-H and Orca
39ee3451b8
build(ssh): diagnose Windows PE reproducibility drift
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 13:19:46 -04:00
Jinwoo-H and Orca
f864d3fa6d
build(ssh): syntax-check runtime builder
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 12:52:15 -04:00
Jinwoo-H and Orca
3e433b3438
build(ssh): canonicalize native build path
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 12:36:14 -04:00
Jinwoo-H and Orca
a09b02ec4e
build(ssh): stabilize native runtime rebuilds
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 12:32:30 -04:00
Jinwoo-H and Orca
e58913d1a5
test(ssh): improve native reproducibility diagnostics
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 12:05:53 -04:00
Jinwoo-H and Orca
c70e96374c
test(ssh): gate runtime clean-build identity
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 11:49:48 -04:00
Jinwoo-H and Orca
c04b4f6300
fix(ssh): settle copied Windows ConPTY worker
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 11:20:42 -04:00
Jinwoo-H and Orca
6bba900209
test(ssh): classify lingering Windows smoke resources
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 11:05:09 -04:00
Jinwoo-H and Orca
ddf28eb8db
test(ssh): settle Windows runtime PTY smoke
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 10:52:54 -04:00
Jinwoo-H and Orca
922edb6ff2
build(ssh): add Windows relay runtime artifacts
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 09:58:21 -04:00
Jinwoo-H and Orca
f2b387b21b
build(ssh): assemble relay runtime artifacts
...
Co-authored-by: Orca <help@stably.ai >
2026-07-14 09:03:25 -04:00
Brennan Benson
31f643ca42
Add version-matched skill guides to the CLI ( #8624 )
...
* Add version-matched bundled skill guides
* Clarify skill freshness rollout PRs
* Add canonical skills show alias
* fix(skills): address guide review feedback
* fix(skills): make guide commands cross-platform
* fix(skills): apply the ORCA convention to the emulator guides
Review follow-up: the emulator guides still instructed literal
`orca emulator ...` in sh fences with no Linux disambiguation, so on
unmanaged Linux they could launch the GNOME screen reader — the exact
failure the executable-selection preamble prevents. Both emulator
guides now carry the preamble and ORCA placeholder across fences,
tables, and prose, and the cross-platform safety test covers all four
converted guides. Also replaces computer-use's "unless a block names a
shell" carve-out, which contradicted its own POSIX example, with the
unconditional placeholder rule.
2026-07-14 02:17:55 -07:00